https://www.securityprivacyrisk.com/password-managers-attacks-and-defenses-usenix/